Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18d930f9-d6f4-3529-85d8-1209abde5bbc.roa
File: 18d930f9-d6f4-3529-85d8-1209abde5bbc.roa (raw, json)
Hash identifier: pQebjMaHcB8zxgmbDyEddNX+vAAp3lfspOC8CYun3PU=
Subject key identifier: 1B:01:36:62:CA:6E:15:24:77:5E:CF:4C:02:33:CD:02:AA:18:20:FC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D64D91F59352B46A388C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18d930f9-d6f4-3529-85d8-1209abde5bbc.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33651
IP address blocks: 70.89.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:64:d9:1f:59:35:2b:46:a3:88:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=37365bc8-3811-46bb-9a65-cf9a3c9ee646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:32:3b:cf:07:ef:5c:ee:d6:4e:52:26:c8:
59:61:4b:e7:b1:59:c6:83:a3:fb:75:29:4c:22:34:
2e:8f:3f:95:25:3d:50:97:4c:9e:a4:4a:de:ee:61:
10:6f:fb:8d:91:34:be:51:8f:3a:8c:38:61:50:e2:
71:ff:bc:94:43:37:31:66:da:a0:ce:8a:31:87:9c:
98:32:16:b9:93:d8:20:51:64:1e:4f:3a:e8:d4:bb:
62:91:7c:fd:1d:31:51:ac:f7:46:59:95:b4:12:0b:
0c:dc:14:9b:df:86:43:d4:e8:f1:b1:a1:1b:f4:4c:
31:00:51:9a:1a:64:7c:94:f1:8c:14:38:26:f1:b5:
8b:57:b3:e4:b9:12:ea:2d:92:83:3e:95:23:f7:eb:
9d:3e:8f:0e:33:36:23:cd:62:59:63:3d:dd:36:79:
a2:fb:80:a6:58:65:a5:8a:32:aa:a3:50:84:78:44:
06:c8:93:7a:35:e7:68:99:d3:95:a3:31:57:cb:22:
53:a4:7a:86:c0:db:dd:7e:c5:27:c4:fa:f2:62:cd:
7c:be:20:a1:12:a2:1a:8f:87:ee:65:bb:2e:7b:ee:
00:4d:e1:31:61:7b:52:62:2d:4d:3d:f4:64:3b:67:
4c:df:3b:c5:37:8b:06:a7:80:6e:6c:86:5c:3c:8b:
bb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:01:36:62:CA:6E:15:24:77:5E:CF:4C:02:33:CD:02:AA:18:20:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18d930f9-d6f4-3529-85d8-1209abde5bbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
70.89.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:2d:f3:3a:5f:18:ad:07:09:1e:a1:1c:05:21:3c:6c:b5:30:
e5:19:51:0c:e9:be:76:80:1c:59:10:74:36:09:ec:e3:79:17:
75:c1:46:6c:fb:ab:f9:bb:28:5f:28:00:bb:3c:7d:2a:22:1b:
f2:1a:94:dc:35:d1:37:28:1e:5e:e7:4a:44:0f:70:f1:70:4f:
d5:d9:fb:a1:55:15:09:39:64:ff:fe:48:10:3d:11:af:a4:62:
b0:f8:51:54:38:24:bc:03:d1:42:bc:30:b0:02:f2:c4:51:2f:
55:9f:51:12:24:ab:34:6c:c5:1d:90:c7:80:43:a8:3f:f9:ab:
43:e0:35:af:e7:9b:4c:89:18:3b:95:27:98:bd:70:6c:97:1c:
84:32:6c:02:17:d0:0d:1b:b8:1b:ea:3d:e1:cb:f2:00:64:ec:
83:ea:15:dc:0d:05:74:e2:f6:80:c6:5d:c6:eb:fd:ee:23:8a:
e5:be:89:40:27:d1:dc:ee:9f:46:a2:91:27:3c:72:00:d3:62:
ad:29:19:e8:3f:07:71:b8:9b:db:a3:6a:9d:5e:c0:9c:d1:f2:
59:38:d1:6c:4b:b2:1c:c9:df:15:17:95:a0:55:1d:71:54:aa:
c2:0e:c7:65:3f:ba:4e:1e:1c:99:6c:58:f7:14:a9:f1:e8:6e:
e1:4f:b9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:05:14 2025 by rpki-client